Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/6CAC2064EA2211EA9C2F064AC4F9AE02.roa
File:                     6CAC2064EA2211EA9C2F064AC4F9AE02.roa (raw, json)
Hash identifier:          HgX4tCn4FMdl0R/ylo4Q2his11f507x0EEUUjL+i3vA=
Subject key identifier:   2D:9A:E7:23:D6:4E:F2:6B:19:0A:3E:B3:75:5D:54:5A:31:9A:F6:31
Certificate issuer:       /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
Certificate serial:       087F
Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/6CAC2064EA2211EA9C2F064AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:21:47 +0000
ROA not before:           Tue 30 Sep 2025 21:22:52 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141038
IP address blocks:        103.155.42.0/24 maxlen: 24
                          103.168.208.0/24 maxlen: 24
                          2001:df4:b080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl
                          rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2175 (0x87f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EAD, serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
        Validity
            Not Before: Sep 30 21:22:52 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a42f5b-375e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3c:e3:9b:5d:e9:fe:ce:56:a8:13:35:bc:d8:
                    bc:ae:57:01:e5:b1:18:1d:72:ff:99:d5:88:2e:18:
                    90:1a:0c:ce:ce:47:e6:07:d2:0f:f8:0c:8f:f5:2b:
                    b7:62:cc:cc:87:a4:51:e1:ec:50:0b:de:c8:aa:6a:
                    fe:d8:a2:ad:e3:41:18:1d:84:d3:a6:c2:d9:8a:4f:
                    d6:2a:e8:ba:ff:a0:9e:4c:80:9c:d8:ff:b0:9b:2a:
                    38:c1:06:bb:f1:6d:73:c3:20:83:d5:54:e4:0b:f2:
                    91:40:1f:2e:ec:62:ae:b6:87:c5:66:8a:b2:36:f7:
                    cb:59:20:9b:e8:78:f3:7a:a6:bb:b7:95:14:da:d3:
                    9e:be:67:00:84:ed:f8:b7:da:03:36:3e:3c:d4:ca:
                    b8:e6:b2:c4:38:74:b0:a2:01:45:5b:60:5c:76:c3:
                    25:79:5e:5f:c3:2a:ec:d1:55:0b:2c:bd:57:e2:de:
                    7b:d9:f7:6b:3c:8f:d1:1c:9b:ff:a3:25:c3:ed:d0:
                    b4:ea:06:38:65:98:02:a0:29:86:5b:33:3b:50:3a:
                    69:f0:3c:14:5d:b3:60:0d:41:5c:d2:9c:ea:4a:da:
                    38:54:30:b1:d9:ab:d1:bc:b7:a2:77:5b:21:75:92:
                    c4:27:13:c2:b9:98:a3:3b:2e:b2:06:e2:7f:83:aa:
                    38:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9A:E7:23:D6:4E:F2:6B:19:0A:3E:B3:75:5D:54:5A:31:9A:F6:31
            X509v3 Authority Key Identifier:
                keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/6CAC2064EA2211EA9C2F064AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.42.0/24
                  103.168.208.0/24
                IPv6:
                  2001:df4:b080::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:cf:e9:53:47:b6:29:d5:ae:09:0f:3e:2e:c3:e0:7c:db:1b:
         6b:43:17:53:da:92:6f:2b:98:50:43:8e:ce:c1:9b:4e:8d:65:
         97:1e:e1:89:c4:ef:8d:0b:50:8c:bf:00:20:7e:ff:f4:ff:cd:
         f6:f0:f0:46:6e:43:5a:15:c9:46:c5:41:71:1f:b9:32:12:1d:
         49:c4:5b:78:2a:07:5d:71:62:7e:ba:14:ff:9d:0b:95:bb:9a:
         01:1b:ff:b2:6b:d7:4a:02:fc:34:62:df:fb:06:13:a7:e3:4c:
         44:8e:93:18:08:a3:e5:dc:1d:3b:7f:4e:62:25:d9:59:c9:49:
         bf:f7:b5:8a:84:40:27:51:63:c3:bd:f3:4f:8d:9d:a0:f2:40:
         6f:09:4b:c4:07:35:ec:42:c1:03:a2:b0:6b:a2:d8:55:ee:5c:
         fe:f8:b1:3c:9b:3e:04:7b:e7:10:6f:20:9f:c3:6d:13:dd:f7:
         73:31:f5:2c:65:d6:ea:41:5b:44:56:9f:7b:89:40:af:94:d9:
         13:90:40:f0:85:ee:53:d1:14:db:49:88:11:b8:02:ab:12:9e:
         7f:bb:98:1b:fb:9a:e8:e1:1f:0e:7a:29:79:f3:85:71:9c:0f:
         0e:e0:4f:c6:d7:75:19:1e:65:ff:05:06:d4:cf:ba:c4:40:80:
         36:33:0e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:08 2026 by rpki-client